Learn more about Cloud SIEM's new First Seen Rules, which can generate signals when certain behavior or activity is detected for the first time.

For more information, see the official docs here: https://help.sumologic.com/docs/cse/rules/write-first-seen-rule/